Submit a device attestation

POST

https://devapi.withverifa.com/api/v1/sdk/attest

Accepts a device attestation submission from the mobile SDK. The server validates the one-time challenge. Server-side Apple App Attest / Google Play Integrity verification is not yet implemented — the endpoint currently returns status: "not_verified" after consuming the challenge.

Authenticated by capture session token in the request body.

Authentication

X-API-Keystring

Organization API key. Keys are prefixed with vk_live_ (production) or vk_sandbox_ (sandbox).

Request

This endpoint expects an object.

tokenstringRequired

Capture session token.

platformenumRequired

Allowed values:

attestation_tokenstringRequired

challengestringRequired

Response

Attestation processed.

statusstring

reasonstring

platformstring

Errors

400

Bad Request Error

422

Unprocessable Entity Error

$	curl -X POST https://devapi.withverifa.com/api/v1/sdk/attest \
>	-H "X-API-Key: <apiKey>" \
>	-H "Content-Type: application/json" \
>	-d '{
>	"token": "vk_live_1234567890abcdef",
>	"platform": "ios",
>	"attestation_token": "eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdHRlc3RhdGlvbiI6eyJpZCI6IjEyMzQ1NiJ9fQ.SGVsbG8gV29ybGQ=",
>	"challenge": "a1b2c3d4e5f67890"
>	}'

1	{
2	"status": "not_verified",
3	"reason": "Challenge consumed, attestation verification not yet implemented",
4	"platform": "ios"
5	}

Authentication

Headers

Request

Response

Errors